Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
File:                     a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa (raw, json)
Hash identifier:          FPePHaLfujZaY1EfFkKYc5UhlzCd0OZnSo6JLHvfPMU=
Subject key identifier:   6C:F5:A0:26:1C:A8:BE:E4:A9:CF:66:76:2B:09:C4:9C:97:BF:D6:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F5EF77D6641FB20495F57DF2E344F55D8904619
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa
Signing time:             Fri 21 Mar 2025 00:10:28 +0000
ROA not before:           Fri 21 Mar 2025 00:10:28 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5e:f7:7d:66:41:fb:20:49:5f:57:df:2e:34:4f:55:d8:90:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 21 00:10:28 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:e9:66:90:b1:71:6e:09:f1:fd:6b:d1:ca:
                    6d:21:a3:0a:93:85:04:13:62:1f:7f:dd:66:75:5d:
                    9e:e5:f9:1b:77:57:5d:10:2e:ff:30:6d:fa:41:ff:
                    37:f8:e5:5e:d8:6e:91:c5:99:d5:dc:85:bd:ea:73:
                    5b:61:21:73:2d:5f:f9:2b:d2:e4:fe:5e:5d:bd:55:
                    30:10:58:ff:9b:57:6d:dd:e6:e1:36:d9:94:68:2e:
                    ee:d8:5b:fc:49:c7:3c:11:82:56:3d:52:14:31:6e:
                    c0:86:22:2d:40:be:1f:0c:d8:e2:b5:d1:80:7f:0c:
                    4e:a7:40:1d:bb:c6:c2:59:f2:d3:3b:a3:0d:ff:cc:
                    f3:94:d3:7b:e5:f9:8b:10:5d:24:78:eb:7c:34:d3:
                    0e:0f:90:0b:39:4e:7d:90:45:42:3c:9c:95:aa:f9:
                    68:12:4b:f0:bb:13:8e:4a:5b:7e:7f:ea:2c:a0:79:
                    1a:84:72:86:63:7d:cc:fe:ca:5b:5f:b0:72:ea:da:
                    77:ac:c9:e1:aa:5f:e0:bb:36:03:50:d0:80:7f:ea:
                    a9:2f:c9:0f:e1:05:58:e4:b5:d4:fb:a2:eb:ee:f4:
                    a9:83:da:a9:b6:2f:06:bd:36:ca:ae:d5:c3:a3:50:
                    dd:bc:d5:bc:66:3e:0d:0b:0d:75:43:e0:4d:43:fe:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F5:A0:26:1C:A8:BE:E4:A9:CF:66:76:2B:09:C4:9C:97:BF:D6:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:7f:ed:ec:af:ed:57:24:da:de:83:66:8b:8a:e2:4d:4f:e0:
         87:30:6d:78:58:43:1a:fe:bd:47:ba:9e:b4:28:c5:f2:ce:22:
         36:f6:5d:63:1c:2b:9d:fa:5b:68:d4:08:dc:ae:a8:d5:a0:0a:
         60:ef:40:31:17:22:d5:dd:d9:a8:5d:d5:a0:a5:cc:30:24:f8:
         bd:44:f5:52:76:0f:fa:b4:b1:fc:97:0f:7b:f9:32:d5:88:d6:
         18:a8:f5:cc:54:e0:50:31:e6:9a:a9:60:40:5b:6a:b0:ac:1a:
         58:6d:88:51:b9:87:ee:0a:0a:d8:a5:03:19:23:8a:a9:f5:a2:
         5f:a1:db:ea:f5:3a:87:10:e6:a9:82:95:f3:8f:3e:d4:34:a6:
         31:75:97:c2:d0:1a:6c:92:fe:f7:55:ed:12:08:7c:b5:4a:c4:
         55:e1:0c:45:9d:6b:31:61:ba:07:f9:4f:ad:8e:22:de:60:9a:
         97:9a:0f:7d:84:76:32:4a:11:b3:82:e5:c9:37:8a:b9:9e:97:
         23:1c:22:47:52:22:14:d5:44:c6:c3:11:a9:47:6f:c0:7a:41:
         99:e9:91:03:0d:09:62:f3:9c:42:0b:40:aa:30:8f:b8:ea:38:
         94:d6:bf:90:a5:f6:c6:f7:4a:7d:91:e5:9f:9a:2b:f7:74:5e:
         00:2c:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----